SonicBee a virtual organization and ISO 27001 certified

SonicBee is ISO 27001 certified; the quality standard in the field of information security. This means that the management system underlying our Advisory as Managed services, such as SynerBee and NEXIS4-aaS, complies with ISO standards.

It is worth noting that SonicBee is certified as a “virtual organization”. And it is very nice that the audit organization Tüv Netherland is now highlighting this in a reference case. After all, this is a very modern way of working, also for auditors, and reduces certain risks. We are proud of this recognition and hope to inspire other organizations with our approach: No bureaucracy and still ISO 27001 certified!

Samenvatting Tüv referentiecase:

ISO 27001 and virtual organizations

“How SonicBee put risk management at the heart of their solution-oriented interpretation of the standard”

Digital organization SonicBee achieved ISO 27001 certification with a special approach that suits the organization’s particular structure. The consultancy has neither its own office premises nor its own network, but was able to meet the standard as a ‘virtual’ organization by setting up their information security differently.

The thinking involved in the approach came from the critical questions, “Why are we doing this?” and “Does this work for the organization?” This brought the insight that quite a few security measures might be best practices that should be looked at. Though that in SonicBee’s specific case (as a virtual organization) they did not contribute to lowering their risks. In this, the provisions in the ISO 27001 standard around risk assessment gave SonicBee the opportunity to declare some of these measures (well argued) not applicable. Especially not the ones in the area of physical and network threats.

The Tüv reference case is written in Dutch. Nevertheless, we are willing to tell you more about it in English or German. Please don’t hesitate to contact us to get more insights.

About ISO 27001: information security standard

ISO/IEC 27001 is an international standard for information security management. In many organizations, the importance of information security is greatly underestimated. However, the consequences of a lack of information security are serious. For instance, a hack or leak can cause personal data to be out in the open. By law, every organization is obliged to handle personal data according to certain rules.

The standard describes how an organization can handle information security process-wise, with the aim of ensuring the confidentiality, availability and integrity of information within the organization. This includes protecting personal and/or company data, protection against hackers and break-ins. With an ISO 27001 certification, an organization shows that it complies with all requirements around information security. TÜV Netherlands is an independent certification body with a down-to-earth and accessible approach to certification.

About SonicBee

SonicBee is the Identity and Access management (IAM) company providing innovative and intelligent managed services and business consultancy to make businesses faster, smarter and more secure. We ensure that everything and everyone within your environment can access information in a safe, compliant and smart way.

We challenge the existing market by looking at identities and data in a new way. SonicBee provides managed services, advisory services and trainings focused on increasing our society’s cyber security and creating business value.